Table of Contents

DeviceManagementConfiguration.ReadWrite.All

Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the DeviceManagementConfiguration.ReadWrite.All permission.

Category Application Delegated
Identifier 9241abd9-d0e6-425a-bd4f-47ba86e767a4 0883f392-0a7a-443d-8c76-16a6d39c7b63
DisplayText Read and write Microsoft Intune device configuration and policies Read and write Microsoft Intune Device Configuration and Policies
Description Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user. Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
AdminConsentRequired Yes Yes

Graph Methods

Type: A = Application Permission, D = Delegate Permission

Type Method
A,D DELETE /deviceAppManagement/vppTokens/{vppTokenId}
A,D DELETE /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
A,D DELETE /deviceManagement/deviceCategories/{deviceCategoryId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
A,D DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
A,D DELETE /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
A,D DELETE /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
A,D DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}
A,D DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
A,D DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
A,D DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
A,D DELETE /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
A,D DELETE /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
A,D DELETE /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
A,D DELETE /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
A,D DELETE /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
A,D DELETE /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
A,D DELETE /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
A,D DELETE /users/{usersId}
A,D GET /deviceAppManagement
A,D GET /deviceAppManagement/vppTokens
A,D GET /deviceAppManagement/vppTokens/{vppTokenId}
A,D GET /deviceManagement
A,D GET /deviceManagement/complianceManagementPartners
A,D GET /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
A,D GET /deviceManagement/conditionalAccessSettings
A,D GET /deviceManagement/deviceCategories
A,D GET /deviceManagement/deviceCategories/{deviceCategoryId}
A,D GET /deviceManagement/deviceCompliancePolicies
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
A,D GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
A,D GET /deviceManagement/deviceCompliancePolicyDeviceStateSummary
A,D GET /deviceManagement/deviceCompliancePolicySettingStateSummaries
A,D GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
A,D GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
A,D GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
A,D GET /deviceManagement/deviceConfigurationDeviceStateSummaries
A,D GET /deviceManagement/deviceConfigurations
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/getOmaSettingPlainTextValue
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
A,D GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
A,D GET /deviceManagement/deviceEnrollmentConfigurations
A,D GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
A,D GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments
A,D GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
A,D GET /deviceManagement/deviceManagementPartners
A,D GET /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
A,D GET /deviceManagement/exchangeConnectors
A,D GET /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
A,D GET /deviceManagement/iosUpdateStatuses
A,D GET /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
A,D GET /deviceManagement/mobileThreatDefenseConnectors
A,D GET /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
A,D GET /deviceManagement/reports
A,D GET /deviceManagement/reports/exportJobs
A,D GET /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
A,D GET /deviceManagement/softwareUpdateStatusSummary
A,D GET /deviceManagement/verifyWindowsEnrollmentAutoDiscovery
A,D GET /organization
A,D GET /organization/{organizationId}
A,D GET /reports
A,D GET /users
A,D GET /users/{usersId}
A,D GET /users/{usersId}/exportDeviceAndAppManagementData
A,D PATCH /deviceAppManagement
A,D PATCH /deviceAppManagement/vppTokens/{vppTokenId}
A,D PATCH /deviceManagement
A,D PATCH /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
A,D PATCH /deviceManagement/conditionalAccessSettings
A,D PATCH /deviceManagement/deviceCategories/{deviceCategoryId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
A,D PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
A,D PATCH /deviceManagement/deviceCompliancePolicyDeviceStateSummary
A,D PATCH /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
A,D PATCH /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
A,D PATCH /deviceManagement/deviceConfigurationDeviceStateSummaries
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
A,D PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
A,D PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
A,D PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
A,D PATCH /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
A,D PATCH /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
A,D PATCH /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
A,D PATCH /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
A,D PATCH /deviceManagement/reports
A,D PATCH /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
A,D PATCH /deviceManagement/softwareUpdateStatusSummary
A,D PATCH /organization/{organizationId}
A,D PATCH /reports
A,D PATCH /users/{usersId}
A,D POST /deviceAppManagement/syncMicrosoftStoreForBusinessApps
A,D POST /deviceAppManagement/vppTokens
A,D POST /deviceAppManagement/vppTokens/{vppTokenId}/syncLicenses
A,D POST /deviceManagement/complianceManagementPartners
A,D POST /deviceManagement/deviceCategories
A,D POST /deviceManagement/deviceCompliancePolicies
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assign
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduleActionsForRules
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
A,D POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
A,D POST /deviceManagement/deviceCompliancePolicySettingStateSummaries
A,D POST /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
A,D POST /deviceManagement/deviceConfigurations
A,D POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assign
A,D POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
A,D POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
A,D POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
A,D POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
A,D POST /deviceManagement/deviceEnrollmentConfigurations
A,D POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assign
A,D POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments
A,D POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/setPriority
A,D POST /deviceManagement/deviceManagementPartners
A,D POST /deviceManagement/exchangeConnectors
A,D POST /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}/sync
A,D POST /deviceManagement/iosUpdateStatuses
A,D POST /deviceManagement/mobileThreatDefenseConnectors
A,D POST /deviceManagement/reports/exportJobs
A,D POST /deviceManagement/reports/getCachedReport
A,D POST /deviceManagement/reports/getCompliancePolicyNonComplianceReport
A,D POST /deviceManagement/reports/getCompliancePolicyNonComplianceSummaryReport
A,D POST /deviceManagement/reports/getComplianceSettingNonComplianceReport
A,D POST /deviceManagement/reports/getConfigurationPolicyNonComplianceReport
A,D POST /deviceManagement/reports/getConfigurationPolicyNonComplianceSummaryReport
A,D POST /deviceManagement/reports/getConfigurationSettingNonComplianceReport
A,D POST /deviceManagement/reports/getDeviceManagementIntentPerSettingContributingProfiles
A,D POST /deviceManagement/reports/getDeviceManagementIntentSettingsReport
A,D POST /deviceManagement/reports/getDeviceNonComplianceReport
A,D POST /deviceManagement/reports/getDevicePoliciesComplianceReport
A,D POST /deviceManagement/reports/getDevicePolicySettingsComplianceReport
A,D POST /deviceManagement/reports/getDevicesStatusByPolicyPlatformComplianceReport
A,D POST /deviceManagement/reports/getDevicesStatusBySettingReport
A,D POST /deviceManagement/reports/getDeviceStatusByCompliacePolicyReport
A,D POST /deviceManagement/reports/getDeviceStatusByCompliancePolicySettingReport
A,D POST /deviceManagement/reports/getDeviceStatusSummaryByCompliacePolicyReport
A,D POST /deviceManagement/reports/getDeviceStatusSummaryByCompliancePolicySettingsReport
A,D POST /deviceManagement/reports/getDevicesWithoutCompliancePolicyReport
A,D POST /deviceManagement/reports/getHistoricalReport
A,D POST /deviceManagement/reports/getNoncompliantDevicesAndSettingsReport
A,D POST /deviceManagement/reports/getPolicyNonComplianceMetadata
A,D POST /deviceManagement/reports/getPolicyNonComplianceReport
A,D POST /deviceManagement/reports/getPolicyNonComplianceSummaryReport
A,D POST /deviceManagement/reports/getReportFilters
A,D POST /deviceManagement/reports/getSettingNonComplianceReport
A,D POST /organization/{organizationId}/setMobileDeviceManagementAuthority
A,D POST /users

Resources

Granting this permission allows the calling application to access the following information from your tenant.

Graph reference: intune-androidforwork-androiddeviceownerenrollmentmode